Update go patch dependencies

[red-hat-konflux]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
cel.dev/expr	v0.25.1 → v0.25.2
github.com/42wim/httpsig	v1.2.3 → v1.2.4
github.com/cloudflare/circl	v1.6.3 → v1.6.4
github.com/conforma/crds/api	v0.1.7 → v0.1.11
github.com/docker/docker-credential-helpers	v0.9.3 → v0.9.8
github.com/fxamacker/cbor/v2	v2.9.0 → v2.9.2
github.com/go-openapi/jsonreference	v0.21.5 → v0.21.6
github.com/google/go-containerregistry	v0.21.0 → v0.21.7
github.com/mattn/go-colorable	v0.1.14 → v0.1.15
github.com/mattn/go-isatty	v0.0.20 → v0.0.22
github.com/vbatts/tar-split	v0.12.2 → v0.12.3
go.yaml.in/yaml/v2	v2.4.3 → v2.4.4
google.golang.org/protobuf	v1.36.10 → v1.36.11

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

google/cel-spec (cel.dev/expr)

v0.25.2

Compare Source

What's Changed

• Add conformance tests for (string).reverse() by @​jnthntatum in #​491
• Updates to the conformance tests for integer values in %e and %f format directives by @​TristonianJones in #​495
• Add automated BCR publishing on release tags by @​mmorel-35 in #​498
• Add clarification on scoping rules. by @​jnthntatum in #​506
• Networking extension conformance tests by @​TristonianJones in #​507
• Add conformance test cases for null assignability around repeated fields and maps by @​l46kok in #​510

New Contributors

• @​mmorel-35 made their first contribution in #​498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

42wim/httpsig (github.com/42wim/httpsig)

v1.2.4

Compare Source

cloudflare/circl (github.com/cloudflare/circl)

v1.6.4: CIRCL v1.6.4

Compare Source

What's Changed

• Fix typo: it's to its by @​04cb in #​588
• ci: Bump Go version to 1.26 by @​armfazh in #​591
• tss/rsa: polynomial evaluation using Horner's method by @​armfazh in #​590
• zk/qndleq: Ensure large security parameter by @​armfazh in #​592
• sign/bls: rejects aggregated signatures built with duplicated messages. by @​armfazh in #​595
• Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @​dependabot[bot] in #​585
• tss/rsa: avoiding overflow in lambda calculation with big.Int by @​armfazh in #​598
• deps: Update CIRCL version in code generators. by @​armfazh in #​599
• ci: add Semgrep OSS scanning workflow by @​hrushikeshdeshpande in #​601
• zk/qndleq: Fixes challenge calculation by @​armfazh in #​596
• sign/bls: Check that signature cannot be the identity point by @​armfazh in #​603
• ml-dsa: Don't use tr pointer by @​bwesterb in #​606
• ecc/bls12381: affinize must handle identity elements. by @​armfazh in #​604
• pki: check pem.Decode returned nil block. by @​z9z in #​607
• abe/cpabe/tkn20: fix AND-gate secret sharing. by @​cjpatton in #​610
• hpke: fix verifyPSKInputs() to match spec. by @​cjpatton in #​612
• hpke: Warn about nonce misuse during marshaling by @​cjpatton in #​613
• hpke: don't panic when parsing on hybrid keys/ciphertexts. by @​cjpatton in #​614
• blindsign/blindrsa: reject non-canonical signatures. by @​cjpatton in #​615
• blindsign/blindrsa: reject message unless co-prime with modulus by @​cjpatton in #​616
• oprf: reject identity element as public key. by @​cjpatton in #​619
• Add AGENTS.md and REVIEW.md for contributor and AI agent guidance by @​dotjs in #​620
• ecc/bls12381: check input length for infinity encoding in SetBytes. by @​bwesterb in #​618
• abe/cpabe/tkn20: bound recursion depth when parsing policies. by @​cjpatton in #​622
• abe/cpabe/tkn20: reject ciphertexts with trailing data. by @​cjpatton in #​621
• abe/cpabe/tkn20: handle short ciphertexts as errors. by @​cjpatton in #​611
• abe/cpabe/tkn20: enforce wire count matches policy. by @​cjpatton in #​624
• abe/cpabe/tkn20: handle malformed ciphertext header. by @​cjpatton in #​623
• abe/cpabe/tkn20: reject circuits with invalid topologies. by @​cjpatton in #​625
• Release CIRCL v1.6.4 by @​cjpatton in #​626

New Contributors

• @​04cb made their first contribution in #​588
• @​z9z made their first contribution in #​607
• @​dotjs made their first contribution in #​620

Full Changelog: cloudflare/circl@v1.6.3...v1.6.4

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.8

Compare Source

What's Changed

• update to go1.26.4
• wincred: inline label, and append to existing
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3
• build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
• build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.7.1 to 1.10.0
• build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
• build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
• build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0

Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8

v0.9.7

Compare Source

What's Changed

• update to go1.26.3
• ci: update zizmore action to v1.7.1

Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7

v0.9.6

Compare Source

What's Changed

• update to go1.25.9
• secretservice: allow building on openbsd
• wincred: minor cleanups
• Dockerfile: document build-args
• Dockerfile: update golangci-lint to v2.11
• Dockerfile: update xx to v1.9.0
• ci: set default permissions and timeouts
• ci: update actions
• ci: pin actions by sha
• ci: add zizmor workflow

Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6

v0.9.5

Compare Source

What's Changed

• build(deps): bump actions/checkout from 5 to 6 #​395
• build(deps): bump actions/upload-artifact from 4 to 6 #​398
• build(deps): bump softprops/action-gh-release from 2.3.3 to 2.4.1 #​391
• build(deps): bump softprops/action-gh-release from 2.4.1 to 2.5.0 #​397
• Dockerfile: remove redundant DEBIAN_FRONTEND=noninteractive #​404
• Dockerfile: update golangci-lint to v2.8 #​402
• gha: update some actions to ubuntu 24.04 #​401
• update to go1.25.2 #​392
• update to go1.25.5 #​399

Full Changelog: docker/docker-credential-helpers@v0.9.4...v0.9.5

v0.9.4

Compare Source

What's Changed

• update to go1.25.1 #​387
• wincred: fix unsafe uintptr usage to be GC-safe on go1.25 #​386
• gha: add macos-15-intel, remove macos-13 (deprecated) #​384
• deb: Dockerfile: update to debian bookworm, ubuntu jammy (22.04) #​385
• Dockerfile: update xx to v1.7.0 #​383
• Dockerfile: update golangci-lint to v2.5 #​386
• Dockerfile: merge build stages #​249
• build(deps): bump github.com/danieljoos/wincred v1.2.3 #​388
• build(deps): bump softprops/action-gh-release from 2.2.1 to 2.3.2 #​373
• build(deps): bump actions/checkout from 4 to 5 #​376
• build(deps): bump actions/setup-go from 5 to 6 #​377
• build(deps): bump actions/github-script from 7 to 8 #​378
• build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 #​379

Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

• Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
• Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
• Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
• Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
• Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768

CI / GitHub Actions and Docs

🔎 Details...

• Bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​760
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in #​761
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in #​763
• Update README for v2.9.2 release by @​fxamacker in #​769

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

• [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
• [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
• [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)

🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

• [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
• [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
• [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
• [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)

What's Changed

• 🆕 Add TimeMode encoding option TimeRFC3339NanoUTC by @​fxamacker in #​688
• Use actual negative zero in tests by @​makew0rld in #​708
• Reject encoding nil inside CBOR indefinite-length string by @​fxamacker in #​750
• Refactor and add tests by @​fxamacker in #​752
• Small bugfixes, defensive checks, and improvements by @​fxamacker in #​753
• Refactor parseMapToStruct(), getDecodingStructType(), getEncodingStructType(), and field struct by @​fxamacker in #​754
• Fix several issues related to keyasint tag option by @​fxamacker in #​757

CI / GitHub Actions and Docs

🔎 Details...

• Bump github/codeql-action from 3.29.2 to 3.29.4 by @​dependabot[bot] in #​690
• Bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​691
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​696
• Bump github/codeql-action from 3.29.7 to 3.29.9 by @​dependabot[bot] in #​697
• Bump github/codeql-action from 3.29.9 to 3.29.11 by @​dependabot[bot] in #​700
• Bump github/codeql-action from 3.29.11 to 3.30.0 by @​dependabot[bot] in #​702
• Bump actions/setup-go from 5.5.0 to 6.0.0 by @​dependabot[bot] in #​703
• Bump github/codeql-action from 3.30.0 to 3.30.3 by @​dependabot[bot] in #​706
• Bump github/codeql-action from 3.30.3 to 3.30.4 by @​dependabot[bot] in #​710
• Bump github/codeql-action from 3.30.4 to 3.30.6 by @​dependabot[bot] in #​712
• Bump github/codeql-action from 3.30.6 to 4.30.7 by @​dependabot[bot] in #​713
• Bump github/codeql-action from 4.30.7 to 4.30.8 by @​dependabot[bot] in #​716
• Bump github/codeql-action from 4.30.8 to 4.30.9 by @​dependabot[bot] in #​718
• Bump github/codeql-action from 4.30.9 to 4.31.2 by @​dependabot[bot] in #​720
• Bump github/codeql-action from 4.31.2 to 4.31.3 by @​dependabot[bot] in #​721
• Bump github/codeql-action from 4.31.3 to 4.31.4 by @​dependabot[bot] in #​724
• Bump actions/setup-go from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​725
• Bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​726
• Bump github/codeql-action from 4.31.4 to 4.31.5 by @​dependabot[bot] in #​727
• Bump github/codeql-action from 4.31.5 to 4.31.6 by @​dependabot[bot] in #​728
• Bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​729
• Bump github/codeql-action from 4.31.6 to 4.31.8 by @​dependabot[bot] in #​732
• Bump github/codeql-action from 4.31.8 to 4.31.9 by @​dependabot[bot] in #​733
• Bump github/codeql-action from 4.31.9 to 4.31.10 by @​dependabot[bot] in #​738
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​739
• Bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​740
• Bump github/codeql-action from 4.31.10 to 4.32.0 by @​dependabot[bot] in #​742
• Bump github/codeql-action from 4.32.0 to 4.32.3 by @​dependabot[bot] in #​745
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @​dependabot[bot] in #​746
• Bump github/codeql-action from 4.32.3 to 4.32.4 by @​dependabot[bot] in #​747
• Bump github/codeql-action from 4.32.4 to 4.32.6 by @​dependabot[bot] in #​748
• Bump github/codeql-action from 4.32.6 to 4.34.0 by @​dependabot[bot] in #​749
• Bump github/codeql-action from 4.34.0 to 4.34.1 by @​dependabot[bot] in #​751
• Update README status section by @​fxamacker in #​758

New Contributors

• @​makew0rld made their first contributihttps://github.com/fxamacker/cbor/pull/708ll/708

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.6

Compare Source

0.21.6 - 2026-05-31

Full Changelog: go-openapi/jsonreference@v0.21.5...v0.21.6

21 commits in this release.

---

Documentation

• doc: updated contributors file by @​bot-go-openapi[bot] in #​99 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #​94 ...
• doc: simplified docs, now pointer to org-level docs by @​fredbi in #​92 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #​89 ...
• doc: update discord link by @​fredbi in #​85 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #​84 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #​81 ...

Code quality

• doc: add portable agentic instructions by @​fredbi in #​86 ...

Miscellaneous tasks

• fix(ci): updated shared workflows for bot-pr monitoring by @​fredbi ...
• ci: schedule bot PR monitoring by @​fredbi in #​98 ...
• chore: bump go directive to 1.25.0 by @​fredbi in #​87 ...

Updates

• build(deps): bump the development-dependencies group across 1 directory with 7 updates by @​dependabot[bot] in #​97 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.5.0 to 2.5.1 in the go-openapi-dependencies group by @​dependabot[bot] in #​96 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.4.2 to 2.5.0 in the go-openapi-dependencies group by @​dependabot[bot] in #​95 ...
• build(deps): bump github.com/go-openapi/jsonpointer from 0.23.0 to 0.23.1 in the go-openapi-dependencies group by @​dependabot[bot] in #​93 ...
• build(deps): bump github.com/go-openapi/jsonpointer from 0.22.5 to 0.23.0 in the go-openapi-dependencies group by @​dependabot[bot] in #​90 ...
• build(deps): bump the development-dependencies group with 7 updates by @​dependabot[bot] in #​91 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.4.1 to 2.4.2 in the go-openapi-dependencies group by @​dependabot[bot] in #​88 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.4.0 to 2.4.1 in the go-openapi-dependencies group by @​dependabot[bot] in #​83 ...
• build(deps): bump the development-dependencies group with 7 updates by @​dependabot[bot] in #​82 ...
• build(deps): bump the development-dependencies group with 7 updates by @​dependabot[bot] in #​80 ...

---

People who contributed to this release

• @​fredbi

---

jsonreference license terms

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.7

Compare Source

What's Changed

• tarball: return error instead of panicking on missing rootfs.diff_ids by @​iahsanGill in #​2304
• gcrane: honor --platform flag in copy by @​iahsanGill in #​2307
• mutate: verify layer digests in Extract and Time by @​momenashrafff in #​2303
• tarball: close layer readers during Write by @​nandbhat in #​2308
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​2311
• build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @​dependabot[bot] in #​2312
• BUGFIX: Fail with error when read exceeds maximum by @​inteon in #​2328
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​2327
• fix(name): anchor loopback registry detection by @​rohan-patnaik in #​2314
• Reject symlinks in OCI layout blobs by @​mosskappa in #​2306
• fix(crane): avoid creating export tar on pull failure by @​Haihan-Jiang in #​2318
• feat(kubernetes): allow ignoring pull secrets by @​rohan-patnaik in #​2315
• fix(name): preserve localhost registry references by @​rohan-patnaik in #​2316
• pkg/registry: export ErrNotFound by @​malt3 in #​2176
• pkg/registry: export RedirectError by @​malt3 in #​2177
• build(deps): bump the go-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​2343
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​2344
• fix: prevent SSRF in google.List() pagination by @​tufstraka in #​2332
• internal/gzip: fix goroutine leak in ReadCloserLevel by @​amarkdotdev in #​2347
• fix(transport): apply refreshed bearer token after cross-host redirect by @​64johnlee in #​2337
• build(deps): bump the go-deps group across 3 directories with 4 updates by @​dependabot[bot] in #​2348
• fix(tarball): normalize paths when matching files by @​bstoll in #​2334
• transport: do not re-attach bearer token after cross-host redirect by @​evilgensec in #​2349
• Bump CI go version to 1.26.4 by @​Subserial in #​2350

New Contributors

• @​momenashrafff made their first contribution in #​2303
• @​nandbhat made their first contribution in #​2308
• @​inteon made their first contribution in #​2328
• @​rohan-patnaik made their first contribution in #​2314
• @​mosskappa made their first contribution in #​2306
• @​Haihan-Jiang made their first contribution in #​2318
• @​tufstraka made their first contribution in #​2332
• @​amarkdotdev made their first contribution in #​2347
• @​64johnlee made their first contribution in #​2337
• @​bstoll made their first contribution in #​2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

v0.21.6

Compare Source

What's Changed

• fix: update dependencies to use new azure sdk components by @​gaganhr94 in #​2262
• transport: restore resp.Body in retryError so CheckError can parse it by @​alliasgher in #​2264
• pkg/registry: return 202 Accepted for PATCH chunk uploads by @​alliasgher in #​2265
• Follow OCI distribution spec for artifactType and annotations by @​malt3 in #​2269
• actions: attach Codecov token to coverage tests on main by @​Subserial in #​2270
• remote: use DeleteScope (with "delete" action) for manifest deletion by @​alliasgher in #​2266
• remote: limit concurrent layer pulls by @​gnix0 in #​2271
• pkg/registry: reject corrupt disk blobs by @​gnix0 in #​2272
• mutate: close layer readers during export by @​gnix0 in #​2277
• crane/flatten: preserve image media type when flattening by @​alliasgher in #​2267
• build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by @​dependabot[bot] in #​2273
• build(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by @​dependabot[bot] in #​2278
• build(deps): bump the go-deps group across 3 directories with 6 updates by @​dependabot[bot] in #​2280
• Replace go-homedir with os.UserHomeDir by @​jammie-jelly in #​2282
• pkg/name: only treat .localhost as non-HTTPS, not .local by @​blackwell-systems in #​2281
• transport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by @​marwan9696 in #​2285
• test(mutate): add Extract round-trip test for filesystem object preservation by @​blackwell-systems in #​2283
• experiments: remove deprecated support for estargz by @​thaJeztah in #​2288
• build(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by @​dependabot[bot] in #​2289
• fix: limit HTTP response body reads to prevent OOM by @​evilgensec in #​2296
• build(deps): bump the go-deps group across 3 directories with 6 updates by @​dependabot[bot] in #​2297
• transport: block redirects from token server to private/link-local addresses (SSRF fix) by @​evilgensec in #​2292
• pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by @​anishesg in #​2279
• validate: skip non-layer layers by @​imjasonh in #​2298
• remote: validate foreign layer URLs to prevent SSRF (fixes #​2259) by @​evilgensec in #​2293
• remote: block SSRF via private-IP Location headers in blob uploads by @​adilburaksen in #​2295
• fix(mutate): preserve config blob and layers for non-Docker OCI artifacts by @​blackwell-systems in #​2286
• fix: preserve per-occurrence layer identity in mutate.Image.Layers() by @​iahsanGill in #​2299
• transport: retry HTTP 429 (Too Many Requests) by @​iahsanGill in #​2301
• transport: allow bearer realm at same host:port as registry by @​iahsanGill in #​2302
• Update go version to 1.26.3 by @​Subserial in #​2300

New Contributors

• @​gaganhr94 made their first contribution in #​2262
• @​alliasgher made their first contribution in #​2264
• @​malt3 made their first contribution in #​2269
• @​gnix0 made their first contribution in #​2271
• @​blackwell-systems made their first contribution in #​2281
• @​marwan9696 made their first contribution in #​2285
• @​anishesg made their first contribution in #​2279
• @​adilburaksen made their first contribution in #​2295
• @​iahsanGill made their first contribution in #​2299

Full Changelog: google/go-containerregistry@v0.21.5...v0.21.6

v0.21.5

Compare Source

What's Changed

• Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by @​thaJeztah in #​2254
• update to Go 1.26.2 by @​thaJeztah in #​2255
• Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by @​dependabot[bot] in #​2257
• build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by @​dependabot[bot] in #​2260

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

v0.21.4

Compare Source

What's Changed

• go.mod: do not make a viral mi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: e2e-tests/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated

Details:

Package	Change
github.com/docker/cli	v29.2.1+incompatible -> v29.5.3+incompatible
github.com/go-openapi/jsonpointer	v0.22.5 -> v0.23.1
github.com/go-openapi/swag/jsonname	v0.25.5 -> v0.26.0
github.com/klauspost/compress	v1.18.4 -> v1.18.6
golang.org/x/crypto	v0.48.0 -> v0.53.0
golang.org/x/mod	v0.33.0 -> v0.37.0
golang.org/x/net	v0.50.0 -> v0.56.0
golang.org/x/oauth2	v0.35.0 -> v0.36.0
golang.org/x/sync	v0.19.0 -> v0.21.0
golang.org/x/sys	v0.42.0 -> v0.46.0
golang.org/x/term	v0.41.0 -> v0.44.0
golang.org/x/text	v0.34.0 -> v0.38.0
golang.org/x/tools	v0.42.0 -> v0.46.0